Because yarn-resourcemanager.zk-acl is set to sasl, you
do not need to set any value for
yarn.resourcemanager.zk-auth. Setting the value
to sasl also means that you cannot run the command
addauth<scheme><auth> in the zkclient
CLI.

Add a new YARN_OPTS to the yarn-env.sh file and make sure
this YARN_OPTS is picked up when you start your ResourceManagers.